Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File:                     Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier:          inp4FU5AAnZUJ74Mkar8s9xkaN5rrKM1Tzfso6Rbn+g=
Subject key identifier:   53:94:A8:0F:FC:8B:2E:27:34:C7:34:49:04:EE:9B:44:57:AD:9C:A1
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer:       /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial:       019849657E035DEC63C2002A90C1EF018E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number:          101E
Signing time:             Sun 27 Jul 2025 01:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:44 +0000
Files and hashes:         1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: oVYlBeqw6XaHixpq9YpLnzN68dl/O5/iU0sLGFbRSCk=)
                          2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:7e:03:5d:ec:63:c2:00:2a:90:c1:ef:01:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
        Validity
            Not Before: Jul 27 01:00:44 2025 GMT
            Not After : Jul 28 01:00:44 2025 GMT
        Subject: CN=5394a80ffc8b2e2734c7344904ee9b4457ad9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:61:08:0c:df:37:09:5e:ee:2b:89:f1:d3:
                    24:ee:f3:29:d1:0e:ad:0c:4c:82:65:f9:eb:05:f9:
                    7e:70:6b:56:86:6b:26:fb:66:9b:84:f9:6b:e2:5c:
                    55:72:8a:1a:aa:db:34:5b:bd:14:8c:bc:bc:fd:64:
                    ea:56:9c:3b:02:c9:10:58:a5:f0:2e:71:d6:31:fa:
                    14:58:f7:ae:b2:29:87:53:9e:6a:01:d4:17:a8:0f:
                    52:33:7f:0b:c6:0e:31:57:bb:d1:fe:dc:ff:c1:a9:
                    40:49:53:e5:83:1e:51:c7:e3:81:7c:a4:59:7c:e2:
                    62:ac:f9:18:d4:76:a2:91:13:7d:34:af:99:3f:b1:
                    1d:3f:0c:19:42:c7:cf:b1:55:a1:d2:a1:33:20:90:
                    f8:c7:61:87:a9:56:96:49:a9:2d:e9:4d:d6:b2:07:
                    d8:f3:ee:c0:6e:59:e4:d8:09:e0:98:a8:72:bb:04:
                    9a:12:9c:9c:d4:83:03:9f:46:fe:cd:a7:c1:bd:20:
                    31:b2:f5:4c:1d:25:f6:21:57:6f:ac:83:7d:f2:b9:
                    d5:82:8c:a9:93:e3:14:a8:42:1b:69:e5:80:28:74:
                    ac:3c:b4:51:b4:4d:81:6e:73:f9:ec:dc:e1:1c:36:
                    65:ad:bb:e5:78:f1:a5:dc:79:9c:b9:9a:3c:44:34:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:A8:0F:FC:8B:2E:27:34:C7:34:49:04:EE:9B:44:57:AD:9C:A1
            X509v3 Authority Key Identifier:
                keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:7f:19:e5:59:f0:e3:eb:10:22:af:ba:b5:29:de:8d:fe:
         b9:52:7f:c8:3c:ed:fb:c8:e9:1f:00:a0:67:02:5d:e0:58:a5:
         06:af:f1:98:25:f3:33:48:4e:ce:18:48:35:5e:2e:bf:4e:6f:
         21:32:b0:97:66:6d:81:a0:ae:59:41:20:b2:80:89:9b:63:e7:
         c7:ed:b8:83:01:1e:8f:22:90:94:3b:2c:11:aa:b9:1b:11:15:
         a9:21:da:25:7a:97:75:f1:9d:6e:0a:4e:a1:61:1d:e4:5f:7b:
         bb:cf:e6:20:fe:74:ef:16:ac:e3:d5:48:06:39:ff:cc:f3:63:
         2b:12:3d:c4:b8:43:be:c4:87:99:ae:f5:fe:d3:46:b0:2c:bd:
         85:08:f2:42:b3:b2:aa:12:9c:dd:57:8f:0f:92:90:31:1d:2d:
         ed:9b:b6:44:7e:ae:e4:7a:31:74:aa:de:27:67:7a:36:bb:18:
         76:b1:f0:34:b2:1f:b7:f1:82:3c:98:0f:6c:72:24:fd:97:28:
         1f:e2:4c:32:ec:8a:ee:23:80:c2:fd:4c:1d:aa:ba:ea:56:39:
         40:64:02:95:aa:90:1a:95:ed:eb:a5:45:91:b1:c5:67:dc:5c:
         f2:dc:2b:10:9a:43:de:38:1a:6e:11:d4:b9:b3:9a:4b:94:3f:
         92:b6:ec:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZX4DXexjwgAqkMHvAY6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjdmYjg0NzgxNzdmNDhjZjQ1YmVkMDdjYmVjZjliNmU5
NWRlODgwHhcNMjUwNzI3MDEwMDQ0WhcNMjUwNzI4MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1Mzk0YTgwZmZjOGIyZTI3MzRjNzM0NDkwNGVlOWI0NDU3YWQ5Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgFhCAzfNwle7iuJ8dMk7vMp0Q6t
DEyCZfnrBfl+cGtWhmsm+2abhPlr4lxVcooaqts0W70UjLy8/WTqVpw7AskQWKXw
LnHWMfoUWPeusimHU55qAdQXqA9SM38Lxg4xV7vR/tz/walASVPlgx5Rx+OBfKRZ
fOJirPkY1HaikRN9NK+ZP7EdPwwZQsfPsVWh0qEzIJD4x2GHqVaWSakt6U3WsgfY
8+7Ablnk2AngmKhyuwSaEpyc1IMDn0b+zafBvSAxsvVMHSX2IVdvrIN98rnVgoyp
k+MUqEIbaeWAKHSsPLRRtE2BbnP57NzhHDZlrbvlePGl3HmcuZo8RDT8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOUqA/8iy4nNMc0SQTum0RXrZyhMB8GA1UdIwQY
MBaAFEL3+4R4F39Iz0W+0Hy+z5tuld6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYt
MWFjNGM1ZDQyOTJmLzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYtMWFjNGM1ZDQyOTJm
LzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9B/GeVZ
8OPrECKvurUp3o3+uVJ/yDzt+8jpHwCgZwJd4FilBq/xmCXzM0hOzhhINV4uv05v
ITKwl2ZtgaCuWUEgsoCJm2Pnx+24gwEejyKQlDssEaq5GxEVqSHaJXqXdfGdbgpO
oWEd5F97u8/mIP507xas49VIBjn/zPNjKxI9xLhDvsSHma71/tNGsCy9hQjyQrOy
qhKc3VePD5KQMR0t7Zu2RH6u5HoxdKreJ2d6NrsYdrHwNLIft/GCPJgPbHIk/Zco
H+JMMuyK7iOAwv1MHaq66lY5QGQClaqQGpXt66VFkbHFZ9xc8twrEJpD3jgabhHU
ubOaS5Q/krbsfA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:35 2025 by rpki-client